CVE-2003-1201

Name: CVE-2003-1201
Creator: NVD / NIST
Published: 2003-03-20T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.60%

Last modified Jun 16, 2026

CVE-2003-1201 is a vulnerability of currently unknown severity. ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).. EPSS estimates a 2.60% chance of exploitation in the next 30 days.

Description

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).

Metrics

EPSS Probability

2.60%

83.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-824

Affected Software

Vendor	Product	Versions
Openldap	Openldap	<= 2.1.12

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685Broken Link, Patch
http://secunia.com/advisories/11261Broken Link, Patch
http://secunia.com/advisories/9203Broken Link, Patch
http://security.gentoo.org/glsa/glsa-200403-12.xmlThird Party Advisory
http://www.openldap.org/its/index.cgi?findid=2390Issue Tracking, Patch
http://www.osvdb.org/17000Broken Link
http://www.securityfocus.com/bid/7656Broken Link, Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/12520Third Party Advisory, VDB Entry
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685Broken Link, Patch
http://secunia.com/advisories/11261Broken Link, Patch
http://secunia.com/advisories/9203Broken Link, Patch
http://security.gentoo.org/glsa/glsa-200403-12.xmlThird Party Advisory
http://www.openldap.org/its/index.cgi?findid=2390Issue Tracking, Patch
http://www.osvdb.org/17000Broken Link
http://www.securityfocus.com/bid/7656Broken Link, Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/12520Third Party Advisory, VDB Entry

Timeline

Published: Mar 20, 2003
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2003-1201?

How severe is CVE-2003-1201?

Severity scoring for CVE-2003-1201 is pending analysis. The EPSS model estimates a 2.60% probability of exploitation in the next 30 days.

How do I fix CVE-2003-1201?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2003-1201?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST